rehype-minify-whitespace

Build provenancecaution

No build attestation or trusted-publisher evidence is available, leaving release provenance less transparent than it could be.

Release historycaution

The package is mature with 19 releases over more than ten years, but it has had no release in the last 12 months and its latest release was nearly two years ago, indicating slower delivery.

Repo commit activitycaution

There were no commits or active maintainers in the last three months, a meaningful sign of currently limited maintenance activity.

Repo toolingcaution

The project uses TypeScript and npm build tooling, but no security-scanning tools were detected, leaving a modest hygiene gap.

Workflow auditcaution

Both workflows were analyzed without findings, and the pull_request_target workflow has no untrusted checkout or script-injection sink. However, all four action references are unpinned, which weakens build reproducibility and supply-chain hygiene.